Home / Encryption / SM2 / SM3 / SM4
SM2 / SM3 / SM4
Everything SM in one page: SM2 key pairs and sign/verify, SM4 encryption (CBC / ECB) and SM3 digests, with ciphertext you can cross-verify.
Free and no sign-up. SM2 / SM3 / SM4 computes and renders entirely in your browser; nothing you enter is uploaded.
More tools in Encryption
- MD5 — Compute the MD5 digest of a text or a file in real time (32- or 16-character form, upper/lower case). Supports UTF-8 Chinese; files can be picked or dropped and are hashed in chunks with a progress bar. Digest only — the original text cannot be recovered.
- DES / 3DES — DES and 3DES encryption with CBC / ECB / CTR modes, 5 padding options, keys and IV as text or hex (the IV can be generated randomly), ciphertext as hex or Base64.
- Hash calculator — One input, eleven digests: MD5, the SHA-1/2/3 families and RIPEMD-160. HMAC mode (with key) is supported; every row copies in one click.
- AES — AES-128/192/256 encryption with CBC / ECB / CTR / CFB / OFB modes, 5 padding options, keys and IV as text or hex (with random generators), ciphertext as hex or Base64.
- RSA key generator — Generate RSA key pairs locally via Web Crypto: 2048 / 3072 / 4096 bits, exported as PEM text (SPKI public key, PKCS#8 private key) with one-click copy. Keys never touch disk and are gone once the page closes.
- RSA encrypt / decrypt — Encrypt with a PEM public key and decrypt with the private key, or sign / verify directly. OAEP and PKCS1 schemes; long inputs are rejected with a clear hint.
- JWT encoder / decoder — Decode a JWT into header and payload with field-by-field explanation, algorithm detection and expiry status — or build one the other way: wrap a payload JSON and sign it with HS256 / HS384 / HS512 (or none for debugging). Decoding does not verify the signature — the page says so explicitly.
- Password strength — Breaks a password down: length, character mix, entropy and brute-force scale; detects keyboard runs, repeats, years and known weak passwords, with a 0-100 score and advice. Entirely on-device.
Frequently asked questions about SM2 / SM3 / SM4
- What are SM2 / SM3 / SM4 used for?
- SM2 is an elliptic-curve public-key algorithm (the counterpart of RSA) for encryption and sign/verify; SM3 is a 256-bit digest algorithm (the counterpart of SHA-256) to check whether content was altered; SM4 is a block cipher (the counterpart of AES-128) for data encryption. In compliance-driven settings they usually appear together.
- Why doesn't my SM2 public key start with 04?
- An uncompressed SM2 public key always starts with 04, followed by the 64-byte (128-hex-character) X and Y coordinates — 130 hex characters in total. If you have the 128-character coordinate string without the prefix, just prepend 04; if it comes from a DER/PEM certificate, extract the public key point first.
- How do I troubleshoot an SM4 "decryption failed" error?
- Check the matched settings one by one: the key must be 32 hex characters, the CBC IV must be the one used at encryption time, the ciphertext must be complete (nothing truncated when pasting) and the padding must match the encrypting side. With ECB, identical plaintext blocks produce identical ciphertext blocks; for sensitive data prefer CBC with a random IV.
- Do I need to register or pay to use SM2 / SM3 / SM4?
- Almost every tool is free, needs no registration or sign-in and has no usage limit; the few pay-per-use features (such as AI watermark removal, AI image generation, AI upscaling, AI annotation, and AI flowchart, mind-map and Mermaid generation) state their prices on the page.
- Is the data I process with SM2 / SM3 / SM4 uploaded to a server?
- No. Calculation and rendering run locally in the browser and your input is never sent to a server; only the IP address page asks our backend for your outbound address when it opens, and that request carries none of your input. Features that need the backend (such as AI watermark removal, AI image generation, AI upscaling, AI annotation, AI flowchart and mind-map generation and "Financial statements – Small Business Accounting Standards") state their upload scope on their own pages.
About Local Toolbox
Local Toolbox gathers the small tools you reach for every day into one place: formatters, encoding converters, date maths, ID card and address parsing, image and QR code handling, password and amount conversion. Open a page and start working — no sign-up, and almost every tool has no usage limit.
Most features compute inside your browser, so your input never leaves your device; the pages are plain static assets, load fast and keep working offline. The IP page asks our backend for your outbound address when it opens and sends none of your input. AI watermark removal, AI background removal, AI image generation and AI upscaling send content to our backend for inference (watermark removal is ¥1 per run; background removal is ¥1 per run; image generation and upscaling are priced by resolution — 2K ¥2, 4K ¥3); AI annotation sends images to a large model that locates the target and returns coordinates (¥0.5 per image, refunded only when every image in the batch fails); AI flowchart, AI mind-map and AI Mermaid chart generation send your text description to a model that builds the diagram (three separate products, charged ¥0.5, ¥0.5 and ¥0.5 per run respectively); and the accounting helper sends the income, expense, social-insurance and balance figures you fill in to generate a report (¥0.5 for the spoken analysis, ¥1 for the report). These features accept Alipay only, upload nothing before payment succeeds, and refund automatically if processing fails.
- Local first: Parsing, conversion, encoding and image processing all happen in your browser and nothing you type is uploaded (AI watermark removal and AI background removal need the image, AI image generation and upscaling need one upload to obtain a URL, AI annotation needs the images for the model, AI résumé rewriting needs your résumé text, AI flowchart and mind-map generation need your text description, and the accounting helper needs the figures you submit).
- Pay per use, prices in plain sight: Almost every tool is free, needs no account and has no usage limit. Only AI watermark removal (¥1 per run), AI background removal (¥1 per run), AI image generation and AI upscaling (2K ¥2, 4K ¥3), AI annotation (¥0.5 per image), AI résumé rewriting (¥0.5 per run), AI flowchart, mind-map and Mermaid chart generation (¥0.5, ¥0.5 and ¥0.5 per run) and the accounting helper (¥0.5 for the spoken analysis, ¥1 for the report) are charged per use. Payment is Alipay only, nothing is uploaded before you pay, and failed runs are refunded automatically.
- One link per tool: Every tool has its own link, so bookmarks and shared URLs always land on the same page.
Links